[31255] in Kerberos
Re: Problem: passwordless SSH-login with Kerberos doesn't work
daemon@ATHENA.MIT.EDU (Nicolas Williams)
Mon Jun 15 18:59:35 2009
Date: Mon, 15 Jun 2009 17:49:16 -0500
From: Nicolas Williams <Nicolas.Williams@sun.com>
To: Simo Sorce <ssorce@redhat.com>
Message-ID: <20090615224916.GA1308@Sun.COM>
Mime-Version: 1.0
Content-Disposition: inline
In-Reply-To: <1245105690.14254.56.camel@localhost.localdomain>
Cc: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
On Mon, Jun 15, 2009 at 06:41:30PM -0400, Simo Sorce wrote:
> > debug1: Unspecified GSS failure. Minor code may provide more
> > information\nNo principal in keytab matches desired name\n
>
> Clearly the ssh server does not agree about what is the right name.
>
> The hostname of the machine must the same name you set in the keytab.
>
> That's what sshd uses (probably through gethostname()) to determine what
> principal name to search for in the keytab.
Using GSS_C_NO_CREDENTIAL (or a credential for GSS_C_NO_NAME) for the
acceptor credential has its advantages.
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
